SecurityTests/clxutils/certcrl/testSubjects/implicitAnchor/implicitAnchor.scr

   1 #
   2 # Test CSSM_TP_ACTION_IMPLICIT_ANCHORS, Radar 4569416
   3 #
   4 globals
   5 allowUnverified = true
   6 crlNetFetchEnable = false
   7 certNetFetchEnable = false
   8 useSystemAnchors = false
   9 end
  10
  11 test = "Standard verification with root in anchors"
  12 cert = leaf.cer
  13 cert = CA.cer
  14 # IS_IN_ANCHORS | IS_ROOT
  15 certstatus = 2:0x18
  16 root = root.cer
  17 end
  18
  19 test = "Standard verification with root in input, expect fail"
  20 cert = leaf.cer
  21 cert = CA.cer
  22 cert = root.cer
  23 error = CSSMERR_TP_INVALID_ANCHOR_CERT
  24 # IS_IN_INPUT_CERTS | IS_ROOT
  25 certstatus = 2:0x14
  26 end
  27
  28 test = "IMPLICIT_ANCHORS test"
  29 cert = leaf.cer
  30 cert = CA.cer
  31 cert = root.cer
  32 implicitAnchors = true
  33 # IS_IN_INPUT_CERTS | IS_ROOT
  34 certstatus = 2:0x14
  35 end